Mechanism to alter database SELECT queries before executed using contributed and custom modules. In order to add additional conditions, access to certain entities is restricted by implementing hook_query_alter() or hook_query_TAG_alter().